17834 matches found
CVE-2026-86815
The BackWPup WordPress plugin (versions 5.2.2-5.7.4 ) contains a vulnerability where it fails to properly restrict access to specific REST API routes used for managing jobs, backup destinations, and backup executions. This lack of authorization allows users with administrator-assigned limited rol...
CVE-2026-86815 BackWPup 5.2.2 - 5.7.4 - BackWPup Jobs Checker+ Database Backup Exfiltration via Missing Authorization on Job REST Routes
The BackWPup WordPress plugin before 5.7.5 does not properly restrict access to several of its REST API routes for job, backup-destination, and backup-execution management, allowing users holding a BackWPup WordPress plugin before 5.7.5-defined, administrator-assigned limited role to create and r...
WordPress BackWPup plugin 5.2.2-5.7.4 - BackWPup Jobs Checker+ Database Backup Exfiltration vulnerability
BackWPup Jobs Checker+ Database Backup Exfiltration vulnerability discovered by Charles Vosburgh in WordPress Plugin BackWPup versions 5.2.2-5.7.4...
SUSE CVE-2026-19584
Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup, the notebook cell content is interpolated into a template with no ACL checks. This allows a malicious user with NOTEBOOKEDITOR permission to plant a VQL que...
PT-2026-89790
The BackWPup WordPress plugin before 5.7.5 does not properly restrict access to several of its REST API routes for job, backup-destination, and backup-execution management, allowing users holding a BackWPup WordPress plugin before 5.7.5-defined, administrator-assigned limited role to create and r...
PT-2026-93254
Name of the Vulnerable Software and Affected Versions Acronis Backup plugin for cPanel & WHM Linux versions prior to 1.9.3.1021 Acronis Backup extension for Plesk Linux versions prior to 1.8.11.638 Acronis Backup plugin for DirectAdmin Linux versions prior to 1.2.3.238 Description Local privilege...
CVE-2026-68487
Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer...
CVE-2026-68487
Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer...
CVE-2026-68487
Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer...
EUVD-2026-75596
Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer...
CVE-2026-68487
CVE-2026-68487 is a path traversal vulnerability in Plesk's Backup Manager caused by an unsigned backup header , allowing an authenticated customer to perform an arbitrary file write as root . The vulnerability is scored CVSS 9.9 (Critical) with a changed scope, reflecting high impact on confiden...
CVE-2026-81804
Unauthenticated Sensitive Data Exposure in ZHBackup – Backup, Restore & Migration = 2.4.2 versions...
CVE-2026-81804
ZHBackup – Backup, Restore & Migration WordPress plugin versions up to and including 2.4.2 are affected by an unauthenticated Sensitive Data Exposure vulnerability. The flaw allows an attacker to retrieve sensitive data over the network without any prior authentication or user interaction. The CV...
CVE-2026-81804 WordPress ZHBackup – Backup, Restore & Migration plugin <= 2.4.2 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in ZHBackup – Backup, Restore & Migration = 2.4.2 versions...
CVE-2026-81804 WordPress ZHBackup – Backup, Restore & Migration plugin <= 2.4.2 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in ZHBackup – Backup, Restore & Migration = 2.4.2 versions...
EUVD-2026-75532
Unauthenticated Sensitive Data Exposure in ZHBackup – Backup, Restore & Migration = 2.4.2 versions...
CVE-2026-19584
Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup, the notebook cell content is interpolated into a template with no ACL checks. This allows a malicious user with NOTEBOOKEDITOR permission to plant a VQL que...
CVE-2026-19584
Velociraptor , a threat hunting and incident response platform, is affected by a VQL injection vulnerability in its notebook backup/restore feature. The daily backup mechanism is enabled by default; upon restore, notebook cell content is interpolated into a template without ACL checks . A user wi...
EUVD-2026-75234
Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup, the notebook cell content is interpolated into a template with no ACL checks. This allows a malicious user with NOTEBOOKEDITOR permission to plant a VQL que...
